Best VPNs for Android and some to avoid

Android phones and tablets come with built-in support for VPNs, but the process of setting one up and getting connected is a tedious pain. On top of that, the protocols available don’t include OpenVPN, which is widely regarded as more secure and open than PPTP and L2TP/IPSec.

So instead of manually configuring a VPN, we recommend subscribing to a provider with dedicated VPN apps for Android. Instead of inputting server domains and pre-shared keys, all you need to do is install the app, log in, choose a server, and hit connect.

A VPN can unblock geo-locked content like Netflix and Amazon Prime Video. It can also prevent your ISP and mobile carrier from monitoring your online activities. It’s always a good idea to connect your Android device to a VPN when on a public wifi hotspot to stop hackers from snooping on your internet traffic.

Below we’ve curated a list of the best VPNs for Android based on the following criteria:

ExpressVPN’s Android app requires you enter a one-time activation code for the device, after which you don’t have to enter a username or password again. The well-designed app can be set to connect as soon as Android starts up. You can choose between UDP (faster) or TCP (more stable) OpenVPN protocols. Torrenting and other peer-to-peer traffic is allowed.

ExpressVPN operates more than 1,500 servers in 94 countries. It’s one of the most reliable VPNs in terms of both performance and ability to unblock geo-locked content from Netflix, BBC iPlayer, Amazon Prime Video, and Hulu, both in a web browser and in each of their respective Android apps. You won’t find better security, which includes 256-bit encryption, perfect forward secrecy, and a no-logs policy.

The Android app is available from Google Play, the Amazon Appstore, and an APK via direct download.

The IPVanish Android app is now in its third generation is looking fantastic. You can see the load and ping time of each server in the list. A widget can be installed and resized anywhere on your home screen. Dropped connections can be reconnected automatically. P2P is allowed. OpenVPN UDP and TCP connections are both available along with a “Scramble” obfuscation feature designed to bypass network traffic sensors that detect and block VPNs.

Performance is reliable and speeds are decent. Security includes 256-bit encryption and perfect forward secrecy. IPVanish sticks to a strict no-logs policy.

The Android app is available from Google Play, Amazon App Store, and an APK via direct download. The Amazon app is also available on the Fire TV Stick, which makes it great for Kodi users who need a good VPN that’s easy to set up.

You can choose from either a list of servers or just click a pin on the world map to connect to a NordVPN server. The company’s SmartPlay DNS can bypass anti-VPN firewalls on geographically restricted sites like Netflix, Hulu, and BBC iPlayer. OpenVPN over both UDP and TCP are available. You can set the app to automatically connect to a specific server on startup. Live chat support is available from within the app. P2P traffic is allowed.

NordVPN adheres to a true zero-logs policy, meaning it doesn’t retain any data about what its customers use the VPN for or how. 256-bit encryption and perfect forward secrecy ensure no one can peek through the secure tunnel. Speeds are fast enough to ensure reliable streaming.

VyprVPN is a longstanding provider that owns and operates its own network of servers in more then 60 countries. This ensures fast speed and strong security, although it does log its users real IP addresses. VyprVPN can unblock sites like Netflix and Hulu, as well as their respective Android apps.

VyprVPN’s Android app is the only one on this list to use a kill switch. While many of the others include this feature in their desktop software, kill switches are notably absent from the mobile apps. A kill switch will block all traffic in the event of a dropped connection, which prevents traffic from leaking onto your unencrypted network. Somewhat ironically, kill switches are in highest demand among torrenters, but VyprVPN has been shown to be adverse to P2P traffic in the past, reportedly penalizing users for downloading copyrighted material. You can also set the app to always connect when on “untrustworthy” public wifi connections.

VyprVPN’s Android app is available on Google Play and an APK via direct download.

CyberGhost will list all of the available servers and locations for you to choose from like the rest in this list, but the latest version of its Android app encourages you to choose from one of several profiles based on how you plan to use it. Surfing on public wifi, for example? Connect with the “surf anonymously” profile. The “Secured streaming” profile includes several servers to choose from according to the streaming channel you want to unblock: Amazon Prime Video, Netflix, BBC iPlayer, etc.

The company has ramped up expansion as of late and its server network now numbers over 1,000 spread across some 60 countries. It performed well in our speed tests. Military grade encryption and a no-logs policy ensure maximum privacy.

The Android app is only officially available from Google Play. A free tier is available but server selection is limited and users must wait in a queue to connect.

VPNs Android users should avoid

Betternet

Betternet supports itself by using tracking cookies and injecting ads into the websites you browse. Because these ads come from a third party, they are not to be trusted. Furthermore, only two servers are available.

Cloud VPN

Typing “VPN” into the search bar of the Google Play Store will likely return Cloud VPN as the top result. Unlimited bandwidth and no data caps for free sounds enticing, but the app works with third-party advertisers to inject ads and collect some information including your device ID and real IP address. That includes putting unsolicited tracking cookies in your browser. Furthermore, the app will suspend users who attempt to use P2P apps.

Beware of “free” VPNs

A quick search on Google Play will turn up no shortage of so-called “free” VPN apps. We strongly advise against using these for several reasons.

First, performance is usually poor. Free VPNs usually have a much more limited selection of servers, impose data caps, and restrict bandwidth. Some force users to wait in a queue before connecting.

Second, security is often substandard, and in some cases a free VPN can actually make your privacy worse off. Encryption standards might be deprecated, obsolete, or even non-existent. Many free VPNs use tracking cookies or log your activity to gather personal information and sell it to third-party advertisers. Others inject advertisements directly into your web browser.

In the worst cases, VPNs can even carry malware payloads to infect your device. The developers do little to offer support and often hide their identities, so there’s no way to know if most free VPNs are even remotely credible.

No Google Play? Try the APK

If you’re using an Android device without Google Play, finding the app for your VPN can be a pain. Kindle Fire HD tablets and smartphones bought in China, for example, can’t install Google services including the Play Store.

The alternative is to download the APK file for the app and install it manually. To do that, you’ll first need to change the settings in your phone to allow apps from third-party developers. The exact steps will vary a bit depending on your version and fork of Android, but here’s the basic steps for Android 4.0 and later:

Go to Settings > Security (‘Device’ in Kindle Fire)

Scroll down to “Unknown sources” and toggle it on

Confirm if necessary

Next, find the APK file for the VPN app. Hopefully you can get this directly from your VPN provider’s website with a bit of searching. Ask customer support if you can’t find it.

Alternatively, you can download the APK from a third party site. There are a ton of APK hosting sites out there with pretty much every app you can imagine. Just Google ” APK” and it should pop up. Be warned, however, that these are not official downloads from the company and thus could contain malware or be outdated. Always read reviews if they are available, run a virus scan on the file once it’s downloaded, and double check the version. If it looks shady, don’t install it.

Once you’ve downloaded the file, just click on it and Android will ask you if you trust the app. Confirm and let Android do the rest. It should install just like a normal app!

OpenVPN for Android

Not all VPN providers have apps, or maybe you can’t find/don’t trust a third-party APK file. Another option is to use an open-source VPN app. We highly recommend “OpenVPN for Android” over OpenVPN Connect and the other clients out there. It’s easier to use and works with a wider range of configurations.

Once you’ve installed the app, click the plus sign at the top right to add a VPN profile. You will probably want to import an existing config file rather than set up your own, so choose the “import” option. You will need the OpenVPN config file, which can be downloaded from your VPN provider’s website. Find it, select it, and you should be set to go.

Manual Android VPN configuration

As a last resort, you can set up an L2TP/IPSec connection manually in your Android settings. We recommend avoiding PPTP, the other built-in protocol available, as it contains known security vulnerabilities.

Go to Settings > More > VPN

Click the ‘+’ sign in the top right corner

Enter your VPN config details as specified by your provider

Save the profile, then click on it to connect. A key icon should appear in the notifications bar when you are connected